WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-fancybox
Published
2019-09-25
Title
Easy Fancybox < 1.8.18 - Authenticated Stored XSS
Slug
easy-fancybox
Published
2024-10-24
Title
Firelight Lightbox < 2.3.4 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
easy-fancybox
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Slug
easy-fancybox
Published
2025-04-21
Title
Firelight Lightbox < 2.3.15 - Contributor+ Stored XSS
Slug
easy-fancybox
Published
2025-06-06
Title
Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS
Slug
easy-fancybox
Published
2025-06-19
Title
Firelight Lightbox < 2.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-faq-with-expanding-text
Published
2022-05-10
Title
Easy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site Scripting
Slug
easy-faqs
Published
2025-01-16
Title
Easy FAQs <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-filter
Published
2025-01-16
Title
Easy Filter <= 1.10 - Reflected Cross-Site Scripting
Slug
easy-filtering
Published
2025-01-16
Title
Easy Filtering <= 2.5.0 - Reflected Cross-Site Scripting
Slug
easy-flash-embed
Published
2025-09-02
Title
Easy Flash Embed <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-flashcards
Published
2025-06-13
Title
Easy Flashcards <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-form
Published
2023-08-23
Title
Easy Form by AYS < 1.2.1 - Admin+ Stored XSS
Slug
easy-form
Published
2025-02-21
Title
Easy Form by AYS < 2.7.0 - Reflected Cross-Site Scripting
Slug
easy-form
Published
2025-11-28
Title
Easy Form < 2.7.9 - Missing Authorization
Slug
easy-form
Published
2026-02-09
Title
Easy Form < 2.8.0 - Missing Authorization
Slug
easy-form-builder
Published
2022-11-16
Title
Easy Form Builder < 3.4.0 - Admin+ Stored XSS
Slug
easy-form-builder
Published
2024-03-29
Title
Easy Form Builder < 3.7.5 - Authenticated (Contributor+) SQL Injection
Slug
easy-form-builder
Published
2025-01-07
Title
Easy Form Builder < 3.8.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
easy-form-builder
Published
2025-08-07
Title
Easy Form Builder < 3.8.16 - Unauthenticated SQL Injection
Slug
easy-form-builder
Published
2025-12-15
Title
Easy Form Builder < 3.8.21 - Missing Authorization
Slug
easy-form-builder
Published
2026-01-06
Title
Easy Form Builder < 4.0.0 - Missing Authorization
Slug
easy-form-builder
Published
2026-02-13
Title
Easy Form Builder < 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure
Slug
easy-form-builder-by-bitware
Published
2021-03-26
Title
Easy Form Builder by Bitware <= 1.0 - Authenticated Arbitrary File Upload
Slug
easy-form-builder-by-bitware
Published
2021-03-27
Title
Easy Form Builder by Bitware <= 1.0 - Unauthorised AJAX calls